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[ S^!#a ] n fflcO=S-liBB PI -Pn tf, ( n , n ) 

ffifgd i £ ( t , n ) Scot (r+1) fflOgfcfrSLItS 
j iU r + l««»4M9JRSj »«flinP i tf>MB!» 
^•z£7)til*^ ( «fa<7)flk „ OSk St-L 0 
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mmmcrMM] 

^* jfcfa^raBfcsWfc* h t & . wtBn mommo 

mmmzti. m^z^-yhv-fZftLxmnztu-z 
n «co«wat/jL-^ f mwzffii . n fflw«pg^ifriai5 
mm d cogp^i^w?B^uc § t $ . 
o t m<rmmiz* o , Mie^n d £*ajit-m«#*s 
»xa»&iss**isifr»5r ( t . n > acoawaftS' 

tiffin fflO«ttHtt. 

toie^raaavfria^^id *^jjw-4#afc . 

£<3l6^dt^r*vvc£j££*irt: ( n , n ) Mco 1 M 
c^KMMRdi ( 0 Si fin) tfi»M-4*afc - 
t SrJfih L/C n«ffl log t njaJuSOfbKaHR* r 
bLtzkZ.mEtMHmdl fc(t, n)!M (r 

+ 1 ) flfwaf^aai: u ^o a r + 1 ttoa$#a, 
»*fffia««isioii3ij#^<7)taita^ ( ws^nk 

WIB#flW|j^4HK$*lfc n ( r + 1 ) j0<7)§^£[« 
dj,k 

tola t mm&msi t . ^ mmiLti t 
toiatffl«=s-«w*^sfiL^gi5^m**^LTina 

[ ft*II 3 ] mi O^IHtt (e , N ) RVffl®m d 
fc, SS2<7>&BSSI ( L 2 , N) fc£JflV>4RSAIIfr9sR 

dOSBfl-NBHsj 3&*4MKS*utf:S, ^eo^eoffiKeot 
fleoiSMtc J; "3 , MIB^H d t*ffi-ii~rfc«#t&li* 

£jsj>ra&r ( t , n ) m^m^n^x^Th^x. 

tolB^-— f'mWfr feStt/ta^Mfc-r- ^ C 2 ( = M« 

(mod n ) ) *sM*piL , c»6n)tawj*as* 

Zj fctt&L— ri6iIfciHr$-4#Hi:**U 

tfria^-—- fUBfi, 



Ltz t ffl^#«pitmriafi^M*-f-^ c 2 ^satta 

iufatffl(7)#TO*^«fiL^gis^ai^Zj ^^lt 
ttriEfa-f-isac i (=ml ~2 (mod nk-«^ 

«hb«-*»*c i , mriB^a^T-'-^c 2strFia^ 

al= ( L 2 ) -i (mod e ) 

a2= (alL 2 - 1 ) /e 

M^C^ 1 (C 2 a2 ) (mod N) 

[ W*JR4 ] If *ri 3 fclSttc^BWiMK^^'r ACti 

Hfnaa-f-^T-^c 2 tcft^-c . m^Mm?-? s 2 

(=M) SrfflW 

iwea#*s»c 1 g^ssns 1 < =m< l ~ 2 

(mod NK A (i^SSfcij^tlW) 

itriaw^smsi ( = < m">« ) . Mias^^x-^ 

s 2 ( = ( M d ) L " 2 ) MfTs&tizm^X , 

al= ( L 2 ) _1 (mod e ) 
a2= (alL 2 - 1 ) /e 
Md =S 1 «i ( S 2 a 2 ) -i (mod N) 
ttt*3H5 ] &BB«ai^HSWid*fflV^RSAiif# 

^^MfflSii. k^z^v hv-??t-frLxmwL%n.ti 

mm d ^^MfcRflBRjWrtfcsnfc t s . -e o+^ffs 
co t ffl^sM^ i o . flnasHMi d §r mm-^-rccffi-^ 

xr- a izmm $ n.^ a > t * - * mar o nrw* e«he 

Huf a n fflco 3 y b° jl - ^ iz . 

i <^SB*MI d ta&r* V if£§ fL^C ( n , n ) MO Hi 
COSP^+ffgdi (OSi Sn)^»f^gt, 
t ^JSt LJtn^Mfi 1 o g t nJJLfc<0»/jN<?5a»* r 
tLttl, BBlBUPiHSfBdi Ht,n)»t(r 
+ 1 ) fflCOgUii-gLfti: L . ^-CO 3 *>C0 r + 1 fflOgfcfrSL 

s O^k St-K O^j gr) (^O'^T. ^ix^' 

wi&s«W3&»64MRs*ifcn ( r + i ) m<?>mftm.* 

dj,k ^#I>¥S. 

d j , k ^zrn^ ^xmmm t . n fe*ifcat»aj* 
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£ 51*1 S ■£ h ft <n 7° a 7 7 J* £ IBIi L ft n > b° * - ? 
[ If 6 ] mi ( e , N ) &lfisB»fi d 

m2coamm (l 2 , n> fc£jsv**RSAiifrfsR 

d^O^tflSsj 3&*5MRS*utfcS, %c?>*cr>tm<r>t 

*JKTI&Sr ( t , n ) ffl^BflKMft^^AKfitfflSfi 

tola n fl^WBfico 3 y b° a - ? l,z „ 

MIB^-if ^B* 1 £3 Wi«f*f*T- ^ c 2 ( = M« 

(mod n ) ) *iwwoaLT#feiifcaf4i-aj* 
zj *w&L-irseaicigmr4*R. snas-fr&ft: 

Lfc t ««4MWBfci9iEa#««'r-^ c 2 itmm^-& 

faietS-TOUC l ( =M L " 2 (mod N K ~ idA. 
miSfM^-ISSC 1 . fflSE«WB«R'r-^ C 2&OTtE:£ 

*m&^hft&<n7x3y?j±zm&i,ft^>vx.-? 

al= ( L 2 ) -i (mod e ) 
a2= (alL 2 - 1 ) /e 
M = Ci al (C 2 a2 ) - 1 (mod N ) 
[ If 7 ] mim 6 tiEKWiEISfiEW-tJ I. ^ , 

mtEfi^-w^T 1 - ? c 2 tft x. t . m^nrnf- ? s 2 

(=M) 

tJEfll#ISSC 1 IcftiT. S^iSHs 1 ( =M d L ~ 2 
(mod N) , A {4<$^2r^-nB-f-) SrffllV 

bJIES**S*S1 ( = < M<")« K lulfig^^'r-^ 

S2 (=( m^)l"2) mrFs&ttzm^x , mums. 

h fztbcryru y=7J±* tEfi Lfcayta-^ ffift-M 0 "bj 

al= ( L 2 ) -i (mod e ) 

a2= (alL 2 - 1 ) /e 

M d =S! al ( S 2 a2 ) -i (mo d N) 

[000 1 ] 



[0002] 

t # . n t m<nwrtm<££ o fB»fflfB&^£ 
fleetftt*t>oT^4 (*tj, i<t< n ) . 

[00 03] iOSoSSIfijflfcfrjSli: LTiis R S ABg 

#9Rt=. L^«««tt&»AL, warn* (t. 

n ) STWaH^ttS** ( t , n ) SWHHWrtJDSrS* 1 
ft^^ltUI. (Y. Frankel, P. Gemmell, P. D. MacKen 
zie and M. Yung, Optimal-resilience proactive publ 
ic-key cryptosy stems, 38th Annual Symposium on Fou 
ndations of Computer Science, pp. 384-393, 1997. 

(JSIT, M[FGMY97] i:V>3) . atXT. Okamo 
to, Threshold key-recovery systems for RSA, Securi 
ty Protocols, tNCS 1361, pp. 191-200, 1997. {&, 
T, -XW. [Oka97] fcV^ ) ) . 

[0004] tf»T«>» SSC [FGMY97] 14. -fV - 

(n, n) m<?m&to1tC}r&mP>tlX\yh (D. Boneh 
and M. Franklin, Efficient generation of shared R 
SA keys, Advances in Cryptology-CRYPTO 97, LNCS 12 
94, pp. 425-439, 1997. (tXF. ~%M. [ B F 9 7 ] tVi 

a ) ) . 

[0006]«[BF97] cott-Cte. H^fiSSrH 
fi^4fc, iMWIdfcWL-C (n, n) awiMKHft* 1 

nmz^btih, &fz. fmi-&f»iHm&m^ti£x 

[ 0 0 0 7 ] PL<{4. SlK [ B F 9 7 ] TJ4. JSTtC 

r^^'jXA^stJ: 3 fc. (2,2) a^sia«»ib&» 
t ( 2 , n ) s^in^hk ( n > 3 *mm&mtz> 

[ 0 0 0 8 ] 2:35, IMBJ<7)^m<7)Jt46, *f}8f«|d**DS 
if^V^T, d « -f^M'-^i d £ (2, n)It 

?£^tt-ri>t{s?gt-i>o tft. wp^itnts 
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r+lT*4fcU r= r l 0 g n J X*fo%> bth 

. 

[0009] £"f\ ^--ifti. (2,2) M<7*^t$C 
£ r + 1 HJI^T-r S tub . r + 1 MOSAA^IB^ d = d 
o,o + d o,i =d li0 +d ij i =-"=d r>0 +d r>1 Sr 

mwm^-Z ztL (z [ 0 , n ] K HB(J#^z SD2 
I^Srz (2) =/3 r /3 r _! ••• £ 0 fc-f*. i-nf 
t4. 0#@~n#ao^:Tc7)SraPo ~P n iftMb 

mm. zfa«ip 2 r + hi«$m# * = 
±xv>mmp 0 ~p n ti±. mwm^zco2 

[0011] KS8ftT«, «BB^»**iit-Kift5e^-* 
ifcT, ffl(7)2l(7)iiP i , P j ( i * j ) i4, r 
+ 1«7> (2,2) M«gP4Mt$H«a*>. ( 2 ) 

tauct'-y hiso^si^-nf i <mwtm ( d 

i.o , di.! ) frb. IMMidtaTC^rtifc^TV^ 
(di. 0 +d isl =d) . 

[0012] ±j*Ufc (2,2) S^A, ( 2 , 

S«t LT(4, ( t , l ) Mfcfflvvfc ( t , i ■» ) s<?5 

$f$£frSfc;Sr^i#*£> & (S. R. Blackburm, M. Burmester, 
Y. Desmedt and P. R. Wild, Efficient multiplicati 
ve sharing schemes, Advances in Crypto logy-EURO-CR 
YPT 96, pp. 107-118, 1996. (KIT. $M [ B BDW9 
6] b^o) ) . fit, jdtt [BBDW9 6] 
J4. IE0>MRmtCtf U <%.<?> ( 1 ) iCSlfttr 1 fcRW- 

[00 13] 
[ftl ] 



•a) 



;)«-u 



[00 14] 

t = 2 bSl 1^1 
t = 3 bS3 -> 1 S3 
t =4 b^6 -» 1^6 

h&O, t£4T'J4t< 1 fc&S. -r*^>*>, tS4t 
a, (t, t ) Stefflvvfc ( t , n ) a«IHWMR*=« 

[0 0 15] Z\cr>tzib. PATTlt. IrKK [BBDW9 
6 ] KcBtt-l. (3,3) StefflVtf: ( 3 , 3 3 ) SOlif 
aMrffc^SrlttHJ-rS. m=2, 1=3, t = 3tU 

( 2 ) sfc^-rj; o fc, b £»m-rs . 



[0016] 
[&2] 



*-fj)0"-l)-3 -(2) 



[0017] , (3,3) ffl«IB«^^ b + 1 = 

4 mmtfL. ( 3 ) s^c^-r i a mi d ^-rs 
4o^it^Ji^^«^-ri> . 

[0018] 

d = d„, 0 +d 0>1 hdo, s (101) 
= di,„ +di.i hdi,, (2C3B) 
= d 2 . 0 +d 2 .i hd 2j2 (30g) 
= d 3 .o +d 3 .i l-d a .g <4G3@) ••• (3) 

tfz, f (x) =a 0 +a, X (mod 3) bt 

h. 

[0019] Z. <IT\ mXM [BBDW96] T14. ft 
»WSr«W (££Tfi3* II^SIM) P ' t t 

fcfcfc, f (X) (4 (4) itOj: p (clEi^il!. (pp.1 
13£>lfrB, 3r*j, "d" (4. «MS+-Ci4 

[0020] 
C»3] 



•(4) 



[00 2 1 ] L^LSr*^ £<9 (4) 5^4. ifcO 

(5) a&Oift'JfcJiMSih.*. 

[0022] 

[»4] 

F3 T-^O . f (oo) 



[00 23 ] {IU a 0 
= a, b?h» 
[0024] 

f 1 ( x) =0 (mod 3 ) 
f2 (x) =1 (mod 3) 
f3 (x) =2 (mod 3) 
f4 (x) =0+X (mod 3) 
f5 (x)=l+X (mod 3) 
f6(x)=2+X (mod 3) 
f 7 ( x) =0 + 2X (mod 3 ) 
f 8 (x) = 1 +2X (mod 3) 
f9 (x)=2 + 2X (mod 3) 
#«BJf j t4 (d 0 , fj( co ) , d llfj(0 ) 



d 



2, f j (1) 



l 3, f j(2) 



cornet b n&eyfflfrmmsffl 1 3 t^-ra 0 -c* s . 
[0025] mi 2 fcs^i 3 fc, mmmm f 1 , f 

4, f8 (2ffa) TiHKa-^S^aiBli, x=oo£*f 



0, 1 



l o, 2 
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[0 0 2 6] ttz. HI 34>. a— 1 cr>\,^ftyy<7)TtV 

3WS.$>&Zk$:^LX^& (&•&, HI 34i<7) "d" 

^) . j^£»^bOtt$nfc«M«»^±- ( f 1 . f 
2 , f 3 ) T(±, X=0, 1, 2^MfL-r C>^itdS: 
HAW* 3«tf*MH1Wll£»*. 5 Z b&*m?t>& . 

[0027] ttz—U. ±ML*lJM [ B F 9 7 ] fcfc 
tfi (n, n)ffltf)«Wm>fc*(=*fU LS^ttSjO 
W^^ALTtTJjJ^'&S ( Y. Frankel, P. D. MacKen 
zieand M. Yung, Robust efficient distributed RSA-k 
ey generation, Proceedings of the thirtieth annual 

ACM symposium on theory of computing, pp. 663-67 
2, 1998. (JiTF, Jtffl [FMY98] k^o ) ) . 

[ 0 0 2 8 ] [ FMY 9 8 ] COttX'lZ. JM I B 
F 9 7 ] CT) ( n , n ) StOBWiMRfc*"^ ( t , n ) 

f (n, n) Mtf>«£jftfcfrV\ *HW*dfc*«-4;|tK0 
»iS££j£-f •?> . #fSSP Hi. aWHUfBd i 
COtV —5—4: 5r 0 s Sum-to-Pol y ( ftJ^MSdSK ) 

( t , n ) M<7j«f^#^HJI-ri» . 
[0029] iflfc.!: 0 , [ FMY 9 8 ] (V}&X 
tt . Itnf^ 3 ^> , ffit« t flfcO«|& P &R S Affi« 

[0030] 

ifihh . tf[BBDW96] OXEfSfrCtt, t = 3 fc*S 
ftSn>32 fi0*^fctS4fO«^tC(i (t, 1« )S 
<?JIBW^(W^3&q^^ft4fcft, ( 2 , n ) S<7)SB 

[003 1 ] ttz—U. -$M [ F M Y 9 8 ] COjj&X' 

l± , iftMt d *JtanH*fc: . KM d £ ffl v vfc#fe1>tt 
#£K»4l$fcttR]H*£e.*. M£i£. *»Mi ( e, 
N ) T'Bf -f-ftS tL^Bf^C = M e (mod N ) ifi 

■&&At-t&) TW§r-r&t%. #«tB8P j«, (6) 
[0032] 

- n j— (mod 0W) "' (6> 

[0033] Lfrt^&h. ^ticommp j i>&im. 
n ( = P q) cofSHasra^^v^^. nm{m.<f> 



ttass^aj^jtaj^nrsBfc^o „ ( 7 ) ^<7)*n# . 

[0034] 
[»6] 

Jl^f^A.^.M (mod N) ■••(/) 
[00 3 5] *^B3(±±iaHWSr#«LT^§nfci>W 

L#& ( t , n ) ffl<o«S«4Hft^X'rAatXIE««E** 
[0036] 

aVS*SS^^6^TB&5: ( t , n ) M^ffi^St^x 

[0037] ttz. msm2tzttj&ti>fflH3;. &mm 

"Ttg^ ( t , n ) I«»MyXfAtfcot, mfS 

(n, n) MCDHIWgP^'Iffgdi (OSi Sn)J« 
ik/h^^K* r t Ltz t # , ffiEflSftflffli d i & ( t , 

n)MC0t ( r+ 1 ) M^ttfLWlt U %<7)?t>CDr 

+ 1 Mogs^sLic^fflTie#iiM<7)fiS'j#-f-o tm&f: 

(ti flCOlk , O^kgt-1, Ogj gr)CI 

frt>&n%tuzn ( r + 1 ) mivtoftti&k* tmm^eo 

ifiTtJ ttt4fc»Tr + l«<r>8MMHaEfl!f8dJ,k *W 

cvmiR ttz t Mn&®Mizmmm.-r-?$:miw?z>3- 
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[oo38] t/t, m^m 3 tzttm^&mwii. m i ^ 
urnm ( e . n ) &v«®n d t .m 2 co&mm ( l 

2 , N) t^ffl^SRSABf-f-^ (e tL 2 it£S^ 

i^mit*^ ffiN(i4±a) izmmzti. 

^^am^timmm^xKi . mib 

(=M« (modN) ) ZmnUBMLXftiotUZSffi- 

ttH£a& u - <oa«Lfc t «o««Hctt!ea-9*r 

* C 2 & iMfl^S *S fc , WE t £> 
SfgLfctffl-SfcfiZj Sr^LTlfiea-^*Sac 1 ( = 
ML"' (mod N) „ A Ji^flt^-ttB^") 

itufEfJC-^mc i , tuiB^ast^^'-^c 2 

[0039] 

al= ( L 2 ) _1 (mod e ) 

a2= (alL 2 - 1 ) /e 

M = C! al (C 2 a2 ) -i (mod N ) 

§ t> lz , If*il4 tMJEfS fgajJi , B*^ 3 fc#f Jt&f" 

£ «jw4Hfe>'*7 i -kfc*5 v it , mtm.nn^- 9 c 2 

fcfW.T, #6*fiRf-^S2 (=M) lilBffl 

#teHClfc«^T. »&Kf«Sl < = M< L " 2 (mo 

d NK A te^St^-Wr ) £fflv\ milEftmi 

^is«Mi*«)4#afcfti-c. uraw^tsas 1 < = 

( M d ) e K flf£*&*fiR-5 , -*S2 (=( M d ) L " 2 ) 
S. 

[0040] 

al= ( L 2 ) _1 (mod e ) 

a2= (alL 2 - 1 ) /e 

M d = S^ 1 ( S 2 a2 ) - 1 (mod N ) 

%m^z>RSA\i§nmzmm%ti. m^z^-y hv-9 
ZMft^izm^mxim&mmz£®tfm% < t , 

3>t"W{:, MIB&IHiiat>'mifB15^ld 

sfgh, <r «i^n d tas-cft vc£jau» *ut { n , 

n ) SO 1 ®7)8fciMS K d i ( 0 a i S n ) £«f^& 
. t SrJKh Lfc n«W» 1 o g t nJJLhOft/J^ 



ffi§&£ rtUtl, MIBIWMf ffidi Sr < t , n ) M 
Ot (r+1 ) H<3*4H9Jftfc U f«^«r + ll 

@«fflk , OSk St-K OSj Sr) 

Sflfcn ( r + 1 ) ffleoSE^Sl^c^tJt^^fiftj 
fc± ty>Tr + lffl«gP^ft*^ffgdj,k *»4#a, 

mm cu , k ^T«3t©s t . # btLizm&mji 

To 5 A £ iafg L rJ V t° a - ^ l^ffi 0 "TigSriBtt 

[0041] § t>t,z^ m&R6tz*ttBt&ftwt, mi 
<wmm (e , n) Rmmmdt, m2n^mm (l 

2 , N ) kSffl^4RSAIf99R (e t L 2 fc(±fc*c& 

mntf. 1 ), ffiN{±4*ii) ^jiffl^n. svhc^-v 
mtmd s*ffi^fc«-TOR*^jsiiriKr < t , n ) 

Mco^^Sci^XxA (cffiffl $ ft £ IB'««#c-Cfc o T . 
BtifBnfflo#1SIMi*ic03yb° A -^(c. Huffi^--^B 
* J feWtfc a»#Jfcr — ^C2(=M« (mod 
N) ) t*JIMSILT»A>*ifc«4J-aj^Zj ^mrlB^-- 

SrIB'tiL, frlB-=L— fgSrtonytA-^t, lulBn 

m^mm\,zmmmn^-9c 2 ^m^tt^Bt. 

tffiea#eac 1 (=ML~2 (mod N) % - 

mSr^-TIB-f-) *f#l>^a. IfrlBfl^SC 1 . MIB^ 

«7"o ^ 5 A ^ IB'll L 3 y tr a - ^M^U 0 WSrIE 

[0042] 

al= ( ) -1 (mod e ) 

a2= (alL 2 - 1 ) /e 

M = C! al (C 2 a2 ) - 1 (mo d N) 

* . it^JB 7 t*t js*-* . it sm 6 t^jte-r s 

IBMai*fcfev^ . m§m*§-ttM7-9C 2 tcftit . 

I^ff-?S2 (=M) SfflVV IfflBffi^SC 1 
ttt^t. I^*S1 (=M- (mod N ) s 

A tt^^SSr^-rfB^-) SrfflVK mSMSm^MMZ 

BtrlBW^SSl ( = ( M^) 
e ) , ffiiW&ttmT-? S 2 (=( M«)L"2) &tf - T 

aB*t=*^^T» sff^a^nfiL. fbRs^fssM-i 

fc n V b° a. - 9m^M 0 ^Tffi&ie«HE«rCft « . 
[0043] 
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al= ( L 2 ) _1 (mod e ) 

a2= (alL 2 - 1 ) /e 

M d =S! al ( S 2 a2 ) -i (mod N) 

am) mmni , 2, sizttBtzmum 
^ttat^Mffsi d l . £ ammmd vc 

£f££ fut ( n , n ) MO 1 fflf53fcJM»fgd i (OSi 
Sn)«)IU t^iiUn«Mlog t nUJLh 

ojs/Jnos^ rtttztz. z com#mm d i * 
(t, n > Mot (r + n m^mmimt u -eod 
*>o r + 1 ffi^^yR£4MSRko«si#^) t mm^ 

( t a firSOflk , OSkSt-1, OSj Sr) fc* 

fcn ( r + 1 ) fflO^^Ifc£t}iil^O«rt a tefci 
fc r + 1 ffloSMHMSHtSJ d j ,k £f#& . 
[0044] I^t, 3-~«FSafc& 1 . t flMO«M£3ifK 
L . i o»K Lfc t ««4MiHfc:«!«*Mfc'r - * * S£S 

^^^S^ffgdj.k ^*^v^T«ff»IL. f#^#i 

[0045] z<nz. a fc, 4*s#^v 
jfsks.^m^mm-ti z t . 

[0046] M*JI3 , 6fc«J6^-ftSMHtt. 3? 
KO&HW (e , N) ai^tSMIdi:, $2<D&0MI 
( L 2 , N) fcfcfflV^RSAflWsR (e £ L 2 
^^ttK* 1 1 T» 0 , feN(J4ta ) izts V "i"C . nfflOSS 

mizmtm d ogp^fit $8 s j § tvtz t # , ^~ ? 
mmtiK nimmm^dibcotimmmimiRL. z<n 
mtRLfz t Mfo&wmt.zm&ttMt'f-f c 2 sshiu 

c 2 ( =m^ (mod n ) ) immamL-zn^tL 

H»C1 (=ML-« (mod N) ) 
fl^-ISSC 1 s Ji)l»ftf-^C2WEfS^ (al = 
( L 2 ) -1 (mo d e ) , a2 = (alL 2 - 1 ) /e „ 
M^Cx 31 (C 2 a2 ) - 1 (mod N))fc*-?H 

[0047] i#l('cfc 0 . #E#Oil^«WC«»F«* 

timi^zmi-t h z t # , * , Bfigsfett^iaH 

[0048]§fet. If^ll4 , 7 (cMJ5E?ti>f&HJ{±. 

mriea-f-^T-^c 2 tcftiT. m&tt^-? s 2 



(=M) £fflV\ fl^feBIC 1 fcfW.T, S^ISms 1 
(=M" l ~2 ( mo d N) , " |±^**fcSrt1E^) 

IS 1 ( = ( M") 6 ) „ f*««f-?S2 ( = ( M«) 
L " 2 ) StfJ5fj£0>* (al= (L 2 ) -1 (mod e 
) , a2= (alL 2 - 1 ) /e s M d = S^ 1 ( S 

2 a2 )-i (mod n) ) izm^x, mnm£*m 

[0049] iixtci: 0 . If^II 3 , 6 (cS*J«-4ffffl 

t nm^m^m^mmza^xmMfh z t 

4. 

[0050] 

tzij<r>X'h->X, fcyyf 5— tf/l'OLI 
^fflffitct *4*flW[#aV»fe<owar (t, n ) Mo 

[0051] (mi commm) $mmmn. Jem 

[ B F 9 7 ] \,Zt5tf%> (2,2) Wfrb (2, n ) M<7) 

*mftw.*mm-&ttit-mtLtz ( t , n > mom 

*iMR^T--6.T»4 . M*B^(c(±, ^iR [ B F 9 7 ] 

o*sC*fflv^4MW8Pi mmmdco ( n , n) mo 
a-ensBiHUffidi ( t , n ) mcvMftmmmk l 

TML, 4MHB5P1 ~Pn ^^Sl^'tffS^fffttt* 
t*TaifcOgP»'lf$8dj,k Srf#S (t, n) MOlK-S 

[00 5 2 ] Ell (±*%BJ<7)m 1 t^9eSIB(=fl(£l5« 
1 ~Pn RtfjL— ^^gU^vH:*-/ W—t^itL 

[00 53 ] 5rfe, #SMP1 -Pn ii. SV^tR— « 

«t^rf*«or, ££-ciiffifc<?5MHPi (fit, 1 ^ 

i Sn ) tft«Wi:UTKl>W*. 
[00 54] «WPi {4. &§MI (e , N ) at/«Ml 
d £4yft$-£«SBi: , [BF97] W^tS^ , 
*mmd* (2, n) MOgP4Mf$gi:L. -fOo^Or 

+ im<nmftmm&%K?ti%mmp\ -pn ^ttr 

( n , n ) MO 1 Mcnmfttiffldi Sr«S-r SDHBfc . 
-OfP^WIgdi * ( t , n ) MOgP^SUCfc L, ^O 

3 *>o r + i {logp^-SLSc^SraoifigiJS-f-o t jtjfeS 
(CS^V^T. ftLfMISiPl -Pn t4rtWS«BE 
fc, #«MP1 ~Pn 3&»feiMRt»*Utn (r + 1 ) MO 

fflffl&i t il«^o«f t J 8(;4Wtr + i HOS5 
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fitzm-S. M^L^^k "P" t,zRz_x "T" comSi 
"IlTz " i:^lB$iX^„ 

[00 56] ?mW.Ul±. nfflc7)«PaPl — Pn CO 

o-hntMnwMTz itmtR-t&mMtt. &mm (e , 

[00 571 ^1:, »1P1 -Pn IV'a-fMU 

ti. Pi St/^--ifgauJi. A-K-^xTWCa 
E^CtkTJ; dC. CPU l l , 12. ^ 

t'Jl 3, MftxVS^ 7-V XT W 15.*- 

*-f i 6sv'7"yy^ i 7^'sih^^xi s^-zt-tT 
mmz titzt\mm^^^x*fo& . 

[0 0 58] .I^^ISjjSc^d^. 1 3{4. 

^i>±iaii (RAMt) fc-^ia^« (A-pfa 
co^^Atft <^xt>h. z\<nmm,±s,zmMk 

£fLfzya7*7J*b. Z\cr>rxi^ ; yMz^to CPU 1 1 

cosoffli h t j; K> . ara p i ^'ff^i nffitfsss ? a 

5. -r=5r*>*>. =84808 PI -Pn aifa- rssuti, 
die, 5t^l=»Sr4fl!fR*^r^4fc<?5"C*S. d*t£>^ 

[00 59] fit, -S-SWP1 — Pn {4. 3--fgiU 

tcSSfttifcitKO^- F*7 x TW$>tit£ X V Wt\ Mz. 
KfUTI/'f 1 5 . F 1 1 7 

[0060]^:, JJLh^J: 3 (;«§atSS«My 

( ( t , n)I«M) MWP1 -Pn 
« (e , N ) RtTO&Md LM[BF9 
z = /3 r , z +/3 r _ 1>z t'-i + ■ 
) 

flMtofcto, ( l o ) at* (li)^J;^ \zm&t 

z ( t ) = j8 r , z y3 r -i,z ■■■ 0. 
fflU titffi/3 r , z iO , t-1 i 

#fi£WPi <4, z (t) t=ti(t5#«ftj ftcDt 

mm izmrs\ ^x , &t-^- r + 1 fi^a&^Mf 

Strife^ s^»Pztcilift^-S» (ST4) 4 

[0067] 

[its] 



7 ] <>W5r5$£*^,vc . IBffffd * ( 2 , n ) U08R# 

HWP1 -Pn teJHW*. 
[006 1]#I1P1-Pn [BF9 7]07f^ 

SV > £ 2 ocoiii Pl qt, Mi d t £ 

( n , n ) ffl-CfHKS&LTl^i . 

[00 62 ] "T^*>, #«B8Pi (lSiSn)ll 
@3 fcjj**- J: o fc, JfctfO ( 8 ) ^£»7fc-rSfcJHl*#Bdi 
Sr^VPftfSWtT^S (STl) . 

[0063] d = dl +d2 +-+dn ■■■(8) 
Jfcfc, £T««-ilMPi (4, ee^SP^-'hffRdi cOx^r 

14. ( 9 ) sSt^J: 3 tEoaUiH** d i 
(t, n) S^afiMURfflHRSj, 1 (OSj Sr, OS 
1 St -2 ) *§ES&th (ST 2 ) . fit. r = r i o 

g t n j X°fo%>« 
[0064] 
[*7] 

■dr'%S„ ■•■(»> 



[0066] 

di = So 5 Q -hSo,i H ^ S 0] t- 2 +S 0 ,t-i 



0 



Si s t-2 + S ls t _! 



t-2 



H-S 



j, t-i 



-hS T 



— S r s o + S r= i 

mz. ^T«#wpi <4. mm^zzkLtzk*, 

z (lSzSn) fcSv^atiMaJRflWRSj.iS^MKt 



fed. ~t%:h-h. j 
*-f-J;3t. tit? 

■+ /3 d , z tJ +-- + ^ 



IMP z<7)g6g'J#-^z * ( 1 0 ) set 
v,z$m-t& ( ST 3 ) . 



0, z 



( 1 0 



0 



0, z 



(11) 



rc C0 c (0 Mi) •> 



[0068] #WPz (4. iB^-t-tf^-C^tSMP 

i ^ starve, ao(i2) ^tc^-rj; 
d tc , #«f j ftoa^ajaffl^B s j , 1 o^p & t -a t 

*fifffidj,k SrJttfJ-rS ( ST5 ) . fit. k {0 
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[0069] 
[»9] 

f-I 

[00 70] »|Pz 14. «fj r + 1 

d= d 0s o +d 0) i H h d 0j t _i 

= d i, o + d i, i H h d i, t-l 

= d r , o +d rjl H h d r , t _! 

. ( 3 , 2 7) S^M^ttl.Iiz = 2 

[0072] 

r = r 1 og 3 2 7 j =3 

2 0 = 0X3 3 +2X3 2 +0X3 1 +2X3° 
20 (3) =0202 ( 3Mm^) 



d=d 3 , 


0 


+ d 3 ,i 


+ d 3l 2 


( 3 3 


= d«. 


0 


+ d 2jl 


+ d 2 , 2 


( 3 2 


= di. 


0 


+ d ul 


+ d lj2 


(3i 


= d 0 , 


0 


+ d 0 ,i 


+ d 0 , 2 


( 3° 



amm^-ik) nfiwsrapi ~p n «3*>. eiot 
j^^a-^saBtcio, ^-^mucDftmm (e , 

N) T'Bf-f-fbStL^T-'— ?C=M e (mod N ) 2rH 
4«Xf 77ST1 1—ST1 6KS^J:3WMft«# 

z ( t ) =/S r , z /3 T . ljZ ■■■ 
jggivf, a-fgiU|±, tfWliTa, Tb A 
( a^b ) tiStt-g. tit^<7)^-fft J (OS j fir) 

S (ST12). 

[0 0 7 6] -r^ffSrSfit-rflftJ j&J&^fcS, 
MBIT z (ST13) . Xf77ST 

i i&t>mmti-&. 

[0077] Xf -y T S T 2 T*fr ^ Stfe-Tffr t i jfc 

hh%. i-fgfu(l "frf>fK7 f -^c&4HIIWTz 

\,zmk$h (ST14) . 

[0078] #«iTz 14. t J «tattJWS*$Mf« 

dj.k (k=/3j,z ) nff^ffc-f-^cfca 

W6ftfcffil*tfI#Xz (=C«." (mod 

n) ) fc-tii-ffiJL— t^Kutagm^-s (sti 

5) . 

[0079] jl— r^B(4. t«*>#»WTz ( z 
A ) &> h^{E Ltz t mcDMtt&j} Xz ( z A ) *■ ( 1 
6 ) 5$e> i d C-^J* L , ¥3tM ^llTC-r 4 3 4: 4 
( ST 1 6 ) . 
[0080] 

[ftl 0 3 



ffl^)SS4Mff8dj,k ( ST 6 ) o 3rfe, 8fcfr 

mm d j , k j± , mm a co^m-^xh h . 
[0071] mmdkmimsmd j,k t«i 
arco <i3) &t,z^m*)x$>%>* 

(to «rB) 

(ti mm) 
< - ) 

(t» ffiB) -(13) 

i^T. «IWP 2 o{4. ^(14) ^Kf£T«fr 

'Wfgtfo 3 *> . nam' z»3 a*^ (0202) t*rjs-r sse 

4HftR<d 3i o . d 2>2 , d li0 , d 0 , 2 ) 
4. 

[0073] 

mm) 
mm) 
mm) 

mm) (14) 

[0 0 74] ~t%fc>1b. J.-HfS«Ui± s (15)3ttC 

TK-r «t a t . t {Ic7)«iitz cohsijs^ z & ■ea-en t 
at^tssw-* (sti 1 ) . 

[0075] 

^o,z -(15) 

= (M f^;;-^,v ... (16) 

= jVf (mod N) 

[ 0 0 8 1 3 JJUKOlMNi, Hf^-ftx-^c ( = 
M« (mod N) ) £ t MO^UBBT z iZ ' £ 

fctt i T » #&W*-r — 9 M £ t T z 

Lfcfc* (STI 4 a) . mraL^gP^-aiTJXzCT)^ 
tCiO^W^M^ (mod N) £%&Zb hX%& 

( st 1 6 a ) . jimu-cJ: 0 iz^mmmmiz^nii, 

nffiao««WPl -Pn 3&* s &B1MIK^K»ttd»^jft 
L. roHff^td^^V^T^c^^ (n, n) StO 

HHoa»WMf«di (osi fin) zuftL, tzmt 

§ . iOM^Hf^Bd i * ( t , n ) M/tot ( r + 1 ) fl 
Ogpm^Sj i:L, ^cOd^^r+lffl^il^gLStS 

j i^WM#^z<otjs»^ (u mmcom 

k,0fikfit-l,0fijfir) tZ&3^X. ZtlZ' 
it#«WPl -Pn fciMftL, i^iMft$*Utn ( r 
+ 1 ) fflCOSfcfrSUt* tjt^Offit d tttC* tWr 
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[ 0 0 8 2 ] «, vc, a-fiiU*\ t »9«B9T z 
Wr- 9 ) *#$MBfR d j , k izm^\ MMmm L , # 

[oo83] ifo^atc 4^E#^^awr^iBaMi* 

[0084]**:, 4$gtiBJIRtt, -f-ftBt^^OA^ 
TORrihW. M[FMY98] *>2r5$J: 0 , ftg 

[0085] § *nffi^jr|(i, £T^ffli=rt£tcJE 
^Ciffi [FMY9 8] «*5U: fiMM-ftflHI^** 

[0 0 86] jdK [FMY9 8] cO^fjfti, 5 

Wt&ffo. IB«ftld*«4MlHPl ~Pn co 

= M ( 



[0087] — ;6\ *^jSfcJ$rCJi, r 1 o g t n j + 
og t nj +HHTi<, ^Vvfffgit^oT^^. 

[0088] ^mmmcoijjttzkmi. t 

£05*£t£OVVt ( 3 , 2 7) ffltfDfgfl? 

V , JilT^ r + 1 M0>2WS£WR£ LXV^b-fh. 
[0089] 

d = d 3 , 0 +d s .i +d 3i2 ( 3 3 firB) 
= d 2i0 +d 2-1 + d 2 , 2 (3 2 «rS) 
= di l0 +d 1 , 1 + d lj2 (3i frB) 
= d 0 , 0 +d 0 , i +d 0 , 2 (3" «fS) 

2 7ffl«nwoa 



20 



23- 



•tit** &&m?c < =m« < = Mizmtt & . c . 

T\ #tMP 



20 i 



fci^^ PtsfcfUTPii*fflivfc#ffl&rjP !0 , 
p 23 . Pntli. fl^flfm*$nr& . ^5rjb*>, #« 

i«3li*fl P 20 = 0 2 0 2. P 23 = 0 2 1 2, P 

i ! = o i o o , ^ti^tiff>mm mim7 1*^- 

[0090] ;co«£, iefftld SflDR'f-s 3owgp^ 
flBR(d ji0 +d jjl +d ji2 ) &X0)ffi T*i>ffifc 

[009 1 ] i<^«^. J3iJcotfflco«MS:giRttt-r^ 
(t, n) M<«iB»4HfcoWiLT^&. ^=Sr^*>, «R 

[0092] jBfcii^R^/hS < . WP(?)UR«#tfi 
^* 4 'jaLTV^ 0 Wi-tf. X^-?;KElGamal) Bf^- 



!3 , P 26 c03Jt^^(i s P 20 = 0 2 
0 2, P 23 = 0 2 1 2 , P 26 = 0 2 2 ^tl^ 

3 1 «ft=aa-r4i:» ( 1 7 ) sst^-r ± ^ c d = d 
li0 +d 1 , 1 +d li2 fr^dizx zm^mmiMmb 

mod N ) ••• ( 1 7 ) 

^$fL"CV^S (T. P. Pedersen, A threshold cryptosy 
stem without a trusted party, Advances in Cryptolo 
gy-Eurocrypt 91, LNCS 547, pp. 522-526, 1991. {&, 
T,M[Ped91b] tu3) ), -tfth-h, $M 
[ P e d 9 1 b ] co^o X d itZHMcT) t MwMHTfl- 

(A) cot^te ( 1 8) ^iatRS-fiRflfaiC 

[0093] 

d = di. A +d,. A +-+d tlA -(18) 

LipL&#t>* $m [ p e d 9 1 b ] cojmx'iz, mm. 

cr>-*Iffim±%ui><D<r> , n {z&M LTBMfaS 

V>«SBBT. 3EtlA^iM^**/J«(cMx 4 i f: ^#4 L 
[0094] #^(4-t-fL-e!h^gBf • SBBWfcSOrC, 

lis i mmmm^u^: ( Hweg-r 4 ) , » 1 wfimi 
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[0095] (M2commm) mz, *$m<7M2<7) 

Mb R s A4±ai£iUl7°n h -aMz-o^XW^h . 
[0 0 9 6] RSABf^t&vVC, lo^^^y 

1 , e2 1 5r ffl t ^ OTT'^fl We ^ L , # ft 

^mwcom@m^mx%. 2o^b§^c 1 , 

C 2 v-te— >%l£fX7uT''&£ (G. J. Simmons, A 

weak privacy protocol using the RSA cryptoalgolith 
m, Cryptologia, vol.7, pp. 180-182, 1983. (lilT, X 
m [S imS3] t^O ) ) . 

[0097] ZCDjffi. [ S i m8 3 ] (OttlZtS^X . 
fraiL^2'?cDHf^C 1 , C 2 (i, &<7) (19) St— 

(20) ^;StJ:3W#^ixtv^„ 

[0 0 98] 

d =M el (mod N) •■■ ( 1 9 ) 

C 2 = M e2 (mod N) ••■(20) 

»3r«^IIBHRfel,e2 tf>«*&*Htacd (el, 
e2) = ltfcl^ UiTcO^X'yrSTcl— STc3Sr 
ffdi:. 2-PC0Hf-f-;£C 1 , C 2 K^7*-yM^I 
7CT§-i> (D. R. Stinson, CRYPTOGRAPHY : Theory and 

Practice, CRCPress, Inc. Boca Raton, Florida, U. 
S. A., 1995. (JJTr\ $M [St i 9 5] b^o) ) . 

[0099] 

(Xf -y7°STcl) al ^el" 1 (mod e2) 
(Xf 7TSTc2) a2 = ( alel - 1 ) /e2 
{Xf77STc3) M = C! al (C 2 a2 ) -i (mod 
N) 

±ia®a (step ci ~c3) ^Acomzmm-t 

[0100] Common (el, e2) -^M 

iBrtr*- f: # , * y -fc— 5/*M * flecWSf 7n T- r? jvtfft 
&t& . ico/n h 3/k^"R s AftaffiffifflTo h ri/U 

[0101] STJJtfc, ^»!llO*2«SIWB»fc«4 

f[Sim83] &t>' [St i 9 5] ^<59RSA4±aS; 

»; [FMY98] CD^mzZK). tttft* d <?5at$Hf* s 
j fc^tW* (t, n) SfOSSflMMR^X'rATft*. 
[0102]^fc, RSA4±a&t£fflTQr-=J/P£ieffl 
T^lg*^ ( a ) ~ ( c ) S^TiBft-Ti i: 

(a) jt y-fc— ^M**HfC*4. 
( b ) jSN^il-f-^. 

( c ) SV^=J|$:44«IBBR (el, e2) «S*&Sft$tgc 
d (el, e2) =1T*4. fit. jaTOKHHTtt, ftffl 



mm (el, e2 ) Sr ( L 2 , e ) fcSSBUTV^S. 
iMBglKL* (TjTCfcSriUi, L = n ! (CftiT, L = 
( n - 1 ) ! t LTt> jl— fmW&lS&M 
Kii. ^~ K^xTW&lflftfcWLTJill 1 »1*HI2 

[0103] $rfc, 45-flSMPl ~Pn J±, U3zE|i|«t. 
ffiK<9«B8Pi (fit. 1 Si Sn) £TC*#iJi: LTIM 
mtt. «WPi {4. [FMY9 8] CO^fSUcgo'^ 

t, &Noai^«ig (pj , qj) *#mr*im£. 
ztib3wimpi , qj Hixm^iiPi ~Pn 

tzti&t&Vffib. #»Pj CO (pj , qj ) 
fc, &mm (e , N) ^R^Sfiltgt. %«fltdft>j!> 
(t, n) SWitfMffffisj **SPttffi 

*(pj ■ qj )»tfsj *fism-4«IBfc, ^--if^ 

fc^WSBf-^C ( = C 2 =M^ (mod N) ) £ 

*f*sa UTW^n^at^ffi^ z j s- a-fgiu izm 
m-zmmbZitix^i,, 
[oio4] j.—^msvit. nm^wMcn o -hcotm 
cowrnTz zMfR-t&mmb. &mm (e , n> ntf 

-ft$tL^Bi^C 2 (= M a (mod N) ) SrtfflO 

gfcfrtfJ^Zj ^^LTBf^C! (= M L 2 (mod 
N) ) 2o«Bf^ (ML 2 , M« ) 

HJiEL/iRSAita&MfflTnhr? ^Common (L 
2 , e ) ->MMHT, ^■yfe-^M&mm-r-SWgi: 

[0105] Jjcfc, J2Lh« i 3 tzm&ZtUzWSHmis 

( ( t , n ) M<^SB»4Hft) **BW££^fc. S:»c [ F 
MY 9 8 ] <50^tcS-3'ViT. iBtMldfr ( t , n ) M 

JIM PI -Pn 
[0106] a«c«ttt, #TOPj i±, ffiNtfO«j£g 
* (pj , q j ) *fMEU *^infi^-s„ #«WPj 
(4. fi!l«#1SMPj frt>%lftz (Pj , q j ) <59^N 
= (pi +p2 +-+pn ) (ql +q2 +-+qn ) 

& 2 o^ii^fTl) S * L . S=5: S 

[0107] #HMP j li ( pj , qj) <m 
m( e, N) ^^BlcL, 4MMBPj<0«»t-^&Sf«il 
d<mfttiffldj *%&~th ( (n, nJMIBWirtj^ 

T) . 

[0108] d = dl +d2 +---+dj +--- + dn 

mz, #«^Pj {4. (n, n) ScOlf^td&Sum-to 
-Poly OKfiffci >5 , ( t , n ) M^fBWi d tC^Mt" 
4 ( ( t , n) WmtottSET) . 
[0 109] icOi:#. t-HH^SUR {bl, -bt-i J 
Z (C^f L , (21) st<0£[l£ . ^IIj^^Se^-S . 
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f(x) = d+blx+b2x 2 +---+b t _ 

£ co&i. y Wr ZW&m d t Ltz k - 1 ^tfO^ri^T' 
AO, ^^^jLWmaKfciO, kffl^SI* (j 

, f(j) ) K-lfcSi4ttR*t)-jt^4. ffl 
U k-l«<o«ilS3&>i3l4— m:3&*£>"$\ ffi&coy 
WWirtti: £ 0 . IBttM dt»^4v ^ttfi *> & & . 

[0110] #«MPj l±, #SMP1 ~Pn co@EO 
mm^i ( 1 Sj fin) §r?Sfc&^ifcx t LT±ie^f 
a£f (x) fcftALTf 0) SrftffU f <x) ±^y«I 
S^i-asiHMBsj ( = f (j) ) &#«NPJ 

So 

[0111] »WP j {4. ft^il^ { t , n ) S«g|5 
tiff* (pJ . qj ) 3r*J. (n, n) m 

[0112] (iMKflMHfc) n»)WI®^, ffiRO 
t «0«R|Tz ( ; A £t& ) (4, a-flSB 

Uj&>&oiI##cJSfc«fc9, ^--^Suco^lHii (e , 
N) T"Bf^-ft;§#1^7 ;: '-^C=M e (mod N ) 2rG3 
8«Xf77ST2 1— ST2 4t£tftlolZ%9[at*3r 
ATT*. L=n ! **0**£»ftgcd (e , L 



ix'" 1 •■•(21) 
2 ) =1 t-tft. 

[0113] -M:*>^, ^--^«U{4. Bf^C ( = 
M e (mod N) ) Srtfflcr)#raT j ( A) 
WM-th ( ST2 1 ) . MWT j(l^(22)^ 

-(24) ^coii 1 ?. ^^M^mmma j srs 
-Hfgautjifrrs ( st2 2 ) . 

[0114] 

[*SU 1 3 



•<22) 

••(23) 
(24) 



[0115] rsau(4, ;^<25) ^cox a 

fc, t««4HIWTj3&»i?,»t49WJ-tB*Zj 

U Hf-f-^:M L2 (mod N) Sr^ft-tS (ST 2 

3) . 

[0116] 

Hftl 2] 



a) 



■JV/ 1 - (modN) 



•(25) 



[0117] -IfSlgUfi. 7C«Bf^M« i: , <I<D 
Hf-^-5:M L2 .hcDSWcM&S 2o<7)Bf-f-^; (m L2 , m 

(L 2 , e ) ->M£ffllvt s X •yt-'JM^n.Hi-t^ 
(ST24) . Srfc. *HStff^t, taucrni3 
Cl al (C2 a2 )-i=M L2al ~ ea2 

^■XcAzWijz, i«iitff-^si (=M) 

(ST 2 1 a) N «#«ERtf5Bt#S:M"fcftiT, 

( = ( M")l*2 (mod N) . ~ {4^#St£ 
^•Tia-f-) Srffl^S (ST2 3a) . 
[0 119]^U.a-fgtUll (d , C 2 ) 
= (M* L " 2 , M) = (( M<0 L ~ 2 , ( M d) e ) ?&^ s 

Cl al (C2 a2 ) -i=M d < L 2al - e 
= M d (mod 

{fmw&vsam) =sr*s. ml^mi^ii hi 

T2 3 a COS. i-fglU(t ^iOS^M^T-^ S 

i ^s^sss s 2 eofiSHisuiv^a^ife^fetJaE 

^Bt'MfrrS ( ST 2 5 a ) . #&*tiBg»i. #& 
M*T-^ S 1 aVIS 1 &fflft ( e , N ) frt>m 1 itK 
f-^Dl (=M« (mod N) > SJtaSL. »fe 
tSAS2%t^(2&6Mi (e , N) *»G,gS2ttlRT-:? 



/]^<9*fjSM^f4, ( M L 2 , M e ) = ( C ! , C 2 ) ~C 
$>9. ( L 2 , e ) = ( el , e2 ) T£>£ « ^T, RS 
A36iSSUflTn h 3 /Mi. (26) afcfcjir*- i 3 , 

[0118] 

= M (mo d N ) ■••(26) 

^T. g^M" (ST24a) „ 

[0120] 
al= ( L 2 ) "I (mod e ) 
a2= (alL 2 - 1 ) /e 
M = C! a i (C 2 a2 ) -i (mo d N) 

R S Aitilffi^fflTn h ( 2 7 ) ^tc 

[0121] 

a2) 

N) ■••(27) 

D2(=M L " 2 (mod N) ) (ST2 

6a). 

[ o 1 2 2 ] m^x , s^^iE^S4. m 1 Mrxt=»2 

SSffU tU^JMSrSftS (ST27a) . 
[0123] 



(13) 12001-34164 (P2001-34164A) 



al= ( L 2 ) - 1 (mod e ) 

a2= (alL 2 - 1 ) /e 

M=D! al (D 2 a2 ) - 1 (mod 

mtiMb m&tt&r— 9 s 1 1 get & t 
S (ST2Sa) . ±j£Lfz£oiz*mw&mt,zxti 

If, R S AMffiifTn h n^SJtffliiri&fl^feff^R 

mcotmTz*MiRLx®*HkT-fic i srmmu t 

ffl«#«MT z # , Bf -^-ft-r — ? C 1 ( = M e (mo 

d n) ) saauBMUTft^^atfl-aj^zj z^- 
irsswsHiu 3-~-mwu$K two^ajizj 

&&titLXW&fe&C 2 (=M L * 2 (mod N) ) 
2rff £ fcfttC. fl^SC 2 , »l#tf-^C 1 WJ 
R S A4*il5£^fflrn h -»T . SJMS^Si 

[0124] £;Jx£i: D , #K£^v*aWtt?1Klf** 

tJMfeflE#S:SeS-r 4 £ k , * it . J5fSg*tttf>4«H 

[0125] s ic, fi-^^T-^ c 2 tftif . m 
&ttmf-?s2 (=m) «#*t»cifcfw. 

STiiR [FGMY97] t0^tt s 

[0130] *nsgfM^T'ii. a-f-iBrtcas^aj^z 

ft. jtlR [ F GM Y 9 7 ] co^J: 0 ^JPMS&^^ffiT 
LXV^h (.3M [ FGMY9 7 ] <50^{i, fV~5- 

**»*tfci*fcJ--^ 'J >y K&££ffr£-r&?rC\ fit** 
k3r&) . 

[0131] LfrLKt&t** JM [FGMY97] ffyji 
5SJ4. N£D;t-f 9-H5St<£ (N) SrftJSTM-^-^'itf 
S^*"5, d P + L 2 k (mod «5> ( N ) ) jfjftfc 

T\ x < d t «1Sp , q tMWzLKM 

a. l 2 k^maui,, (n) ^s^lt^scd 

T\ L 2 k^SB^d£ltmt:'#&V^£T&&. ffl 
U (N) T"d^|lI^P + L 2 k^mft-rS^k 

[0132] JCM. [ F GM Y 9 7 ] 0y}&X 

HriSrV*. [ F GM Y 9 7] <o^n*Tfi, ttHMX 
fcffolgfc:, X-f— 7— ^)V(7r%M. (T. P. Pederse 
n, Distributed provers with applications to undeni 



•■■ (28) 
■■■ (29) 
N) •■• ( 3 0 ) 

t.imsi (=M d L-2( mo d N).~{4< 

[0126] ItiCJ: 9 , W^^IC, 

jm<o^T'jtim*ftm*t& £ t c J: u , t ab^sim 

[0127] £ £TV>- • f < ~=7~^f)VX'<D 

iMLitmm^m^th^mmm^t , -f * -5- 
tf;rait ( ( t , n ) a-c^4Mtfea#/iJHftS 

*) 5rHift-rS3tffi [FGMY9 7] CO^kSrJtKt 

[0128] *mm&mtti±. m[fgmy97] 

cottb mt<. a, /3 Sr^ifck LT^<J0 (30)^0 

[ 0 1 2 9 ] e a + L 2 /3 = 1 ■■■(30) 
fit. gcd (e , L 2 ) = 1 
[113] 

, (?) = (-aZ al) T?*>*3, 
(a, /3) = (P, s/H) -Cfc6 0 

able signatures, Advances in Cryptology-Eurocrypt 
91, LNCS 547, pp. 221-238, 1991. (J^IT, $M [P 
ed91a] ) ) <DttXli$M [ O k a 9 7 ] 

co-fiift TtS'JcO^r^ £ ffl V S i^S^ f>5. £ £ X\ 
ftWLR S A«t^tCfctt*^^r^V*»TO5F3««ffi 
S^if&mw-f& k , #^{4. H 1 1 iz^ti o izft 

[0133] -^r, *iSKii. r -^-wffffi-r 

4«tWtri4, M[Ped91a] k^ffl^(C4 9# 

v^awcii, iKsfiLJtao, sue [FMY98]f^ 

ffl^tct 0 4rtJ[»feaV4MR8[#*fS8WS £ k **T 

[ 0 1 3 4 ] ±MLtzm 1 S.VB2«*MffM 

{4. 7*^— 5— Wfi=ftL=5rV^lttl<?5*^t34^TV»4(?5 

t\ jart, ^A-^-<r)m£thwm,zmm-hi^! 
comm i , 2 co^-cii*tdM^-4 . 
[0135] -t%i?-h . ^jffij i i4. g i <nmmm^ 

fSiau(4. (13) ^Srii^-r^T^gP^ 

ST44 T«aai^Ma2:«B&T # 4 4Wf (t , Sfr^Sr ft 
_t§^:6£k^-C£So 



(14) 12001-34164 (P2001-34164A) 



[0136]**:, 9t20)99fim**Mt. 
[ P e d 9 1 a ] tm.&£tzmiX*fo K) , [ FMY 

98] t a^itfcissfc ra tnK**tTi t 

[0137] -ttb-h* **ftB)tJi. ( t , n ) fflcol^ 

urosawa and D. Stinson, Personal communication, Ju 
ne 1996 Referred in Desmedts paper. (Y. Desmedt,S 
ome recent research aspects of threshold cryptogra 
phy, Information Security, 1NCS 1396, pp. 158-173, 

1997. ) ) &msfflmLxm%?&zktP?$i>. 

[0138]^. *#ftBHtctitt4ietiat*i:LTIi» W. 
Mf^?, 7n>yb°- (SUffiS) f-fX?, ^— K 
fU^. ytr<X7 (CD-ROM. CD-R. DV 
Dt£) , mmr<*? (MOf) , ¥#fM=E'J3f, 

-oXh&XK 

[0139] ±ti. 3immtopt>3yv *.-?t,zj 

[0140] § *wmzt3ifz,tmmmi. ?y 

tea* fcj4-H^e* ufcie««*«>*4 ft« . 
[o i 4 1 ] EttSE<waiofcR6-$\ srobe 

**» 6 #§SSSJ$R lets ft § MS^'llfi 1 £ ft S fc 

[oi42]^ *i6^fctiit4 3yea-^tt, en 

[0 143] 4*;, ^fMBttJtt-Bnyta— ^fcli, 
A"yay|;i^f, ffl»g«^*4ft£ffittMffl!; 



[0144] 4)t, *^H8(±, R SABlr^^tPfi^-r, 
*H»4MKRBlfc*^ < fcWCiMUf , R S ABf ^jfi 

[0145] 

[fgHJtcogfrJH] J2LhiilBLfcJ:-3to*5S6SBt:J:#ilf, # 
( t , n ) fflc^lW^^^a^lEMjK****^ 

[HI] *SHH<9SS 1 ^OI^tffiftifWMMft^'r 

[02 ] RSQBKBfc:titt4««B8aVJ-— f^S^^ 
— K ? x TffiJ^Sr^-r -y ? 0 
[03 ] HSIBI^{cfctt4iiW4MRIMPfcKBW-4fc 

[04 ] mmrnmt,zi}tf&m.^m}ftiwtw-t$>te&b 

<7)?n—i~^—h 

[05 ] mmsmmiz&n&m&Mftzmw'thfzisbn 
[06 ] HiiiBKBifcfcjtia-^iiriKrtfisKW-sfc 
[07 ] Hiai^fcfc^*a#=fniii&5^siiBw-* 
[08 ] *m&&2comtimtzt5»z>&.*§rttSM i E& 
[09 ] N^tig&JiSKij(t5S^Si#*iiHH^s*:y>o 

70-f-V-l 

[010] |B|iaiBBl»ctitt*S5H»ff*KWrSfc«> 
[011] fi»^fc*»!B^fc«ffi»t(t*^4J- 

mm 

[012] fil£3^^fcfctti#»Bfc««S^S9t» 
«$B^*-^^^t-«^0 

[013] mseottiz&v&mm<mit£kimcri® 
pi ~p n , Pi -mm 



(15) 32001-34164 (P2 0 0 1 -34 1 64A) 



[01] 



[02] 



U 



ma 



T 
Pi 



V 



mv. 



Pi 



[03] 



ana 



CPU 



12 



=3 > K 

p-7 



J 



T 

15 



13 



T 

16 



14 



TV** X 



18 



T 

17 



-1 

7-* 



(j, naa<P|!i»&^«[ ^ 



-ST1 



WP z «>ttinw7ti»jtt(Lfiiii 







I 















c 



[06] 



— ST3 
ST4 
ST5 
ST6 



ST13 



[04] 



Kb 



ST11 




^--^ ST 13 



ST15 



ST16 





"yes 























P20 


^23 


p 26 




d 3.0 




d 3 ( 0 




d 2,2 


d 2,2 


d 2,2 




d 1,0 


d 1,1 


d 1.2 


3 q #tS 


d 0.2 


d 0,2 


d 0,2 



[07] 





P 20 


P 23 


Pl1 




d 3,0 


d 3.0 


d 3,0 




d 2.2 


d 2.2 


d 2,1 




d 1, 0 


Cll.1 


d 1,0 




d 0.2 


d 0,2 


d 0.2 



[08] 



-ST21 



-ST22 



ST29 



2-3tf)»#X(M L2 , M*)^M*fcty ' ST24 



(16) 32001-34164 (P2 0 0 1 -34 1 64A) 



[05] 



[09] 



ST11 



sri3 



ST13 



NO 



YES 



ST15 ■ 



-ST21a 



[01 0] 



mut, a, aatiwas, tfflivr, [-ST22 



{M B , m L * >*> e> m « was ST27a 



ST28a 



[Ell 1 ] 







f -f-7-i L 


ft nj -mam 


• [Pad 91 a3 
■ [Oka 97] 


• [FMY 98] 


[t, □] -om/%& 


* [Ped 91a] 

• [FGMY 97] 

■ [Ped 91a] +*&m 


- [BBi">W96] 

■ [BF 97] 

■ [FMY 98] 

• [BF 97] +=fcteE 

• [FMY 98] +fr&m 



[HI 2] 







x=o 


X=1 


X=2 


f 1 


d o.o 


d i,o 


d 2, 0 


d 3, 0 


f 2 


<J 0,Q 


d u 


d 2, 1 


d a, 1 


' 3 


d o.o 


d 1,2 


d 2, 2 


d 3,2 


f 4 


d 0,1 


d 1, 0 


d 2, 1 


d 3,2 


f 5 


d 0,1 


d r i 


d 2,2 


d 3, 0 


' a 


d o,i 


d 1,2 


d 2. 0 


d 3,1 


f 7 


d 0,2 


d 1,0 


d 2,2 


d 3.1 


f a 


d 0,2 


d 1.1 


d 2,0 


d 3,2 


t 9 


d 0,2 


d 1.2 


d*i 


d 3,0 



(17) 32 0 0 1 
[013] 



-34164 (P2001-34164A) 













X=1 




X=2 


a 


1, 4, 7 


b 


1,2,3 


b 


1,9, 3 


b 


1,2,3 




1, 4, 8 




1,2,6 








1, 2, 4 




1, 4,9 




1,2,9 




1,3,7 




1, 2, 8 




1,5.7 




1,5,3 




1 T 4, 3 




1, 6, 3 








1,5, S 




1, 4, 5 




1, 6, 4 


c 




c 


1, 5, 9 


a 


1, A, 7 




1, 6, 8 




1, 6, 7 




1, 8, 3 




1, 9, 3 




1, 7, 3 


d 


1, 6, 8 


d 


1, 8, 6 


c 


1, 9. 5 


a 


1, 7, 4 




1, 6,9 




1, 8, 9 




1,9, 7 




1, 7, 8 




2, 4,7 




4, 2, 3 




6, 2, 3 




6, 2, 3 




2, 4,8 




4, 2, 6 




6, 2, 5 




5, 2, 4 




2, 4, 9 


e 


4, 2, 9 


f 


6, 2, 7 


g 


5, 2, 8 




2, 5, 7 




4, 5, 3 




6, 4, 3 




5, 6, 3 


g 


2, 5, 8 


h 


4, 5, 6 


h 


6, 4, 5 


h 


5, 6, 4 




2, 5, 9 




4, 5, 9 




6, 4, 7 




5, 6, 8 


1 


2, 6,7 


I 


4, 6,3 


j 


6, 9. 3 


k 


5, 7, 3 




2, 6,8 




4, 8,6 




s, g, 5 




5,7,4 




2, 6.9 




4, 8,9 




6, 9, 7 




5,7,8 




3, 4,7 




7, 2,3 




8, 2,3 




9,2, 3 


i 


3, 4,8 


,- 


7,2,6 


g 


8, 2,5 


e 


9,2,4 




3, A, 9 




7,2,9 




8, 2,7 




9, 2, 3 


k 


3, 5, 7 


k 


7, 5,3 


i 


8, 4,3 


I 


9,6,3 




3, 5,8 




7, 5 h 6 




8,4, 5 




9, 6, 4 




3, a, 9 




7, 5,9 




8,4,7 




9, 6, 8 




3, S, 7 




7, 3,3 




8, 9,3 




9, 7, 3 




3,6,8 




7, 8,6 




3, 9,5 




9, 7, 4 


J 


3,6,9 


3 


7, 8,9 


i 


8,9, 7 


I 


9, 7, 8 



[1KB] W12#2H2H (2 00 0. 2. 2) 

[#asitiEi] 

[*IE*t*JlB*] 00 10 
[*El*J#] 

[ o o i o ] jwc, imnff>mm£t5i?&m«<vmm0> 

18»*iztL (ze [0, n] ) , mm^zC02 
Jt^Srz (2) =j8 r /3 r _i ••• /Sofc-^-S. jl— if 

<d r:/3r , d^j^j.j, d 0!>30 } <Iti 

[IKE*NftJHB£] 0023 
[SKEWS] 



[00 23] fit, a 0> a j e F 3T"3b 0 , f (<») = 
[¥1MEE3] 

[aiE^«i«] wmw 
imEttSLma&i 0066 

[«3E*«] IS 
[0066] 

di = S 0j 0 + S Oi i H h S 0j t _ 2 + S 0it _ 1 
= Si, o + Si, i H h Si, t-2 + Si,t-i 

= Sj stl + Sj ;1 H hSj it _2 + Sj it _ 1 

— S r> q + S r> j H l"S r;t _2 + S rjt _ 1 

fed. tth-h. mmpz&mm^zz do>^: 
srf i at- t ifsfctssft-rs (st3). 



(18) 12001-34164 (P2001-34164A) 



z = /3 r , z t r +/3 r _ lj2 t 1 " 1 +•■•+ 

«f*o>t«>, ( i o ) dD^oia taa&*- 

z ( t ) =/3 r , z /3 r _i,z ■•• 0 Sil 
fit. titffi/3 r , z e {0, t-1) 
tfz, #tSMPi(i. z (t) tctiJtS4Mfftdfto3t3tt 

tem&szmmpzizm§'tz> <st4> . 

[¥MffiiE4] 

[ffiuE*fiyfl@£,] 0 0 68 
[StEErS;] Scsg 

[0068] mwpz i±, ge^^tf^«#irip 

z ( t ) = >S r , z ^ r .!, z ••• /3 0 , z 
jggWC N x-fglUil tfflc^TOTa, TbeA 

Tl 2 ) „ 
[¥^MiE6] 

[MEfcf^JHS*] 0079 
[JtEfirtfe] ^5? 
[MEl*l§] 

[ 0 0 7 9 ] jl— tf^S±. tf«#IiTz (ze 

f (x) = d+blx+b2x 2 + --- + b t _ 1 x t 
£ C0^{±. y fljfr tifSMI d t Lfzk- 1 vw&R&rc 

h<o. 77'7>i?x.commmiz£io. kitostM (j 

, f (J)) *^-5StSi5ttfi*toTV^. flU 
k - 1 £>-r\ ffiK^y flM" 

[ ^SME8] 
[«E*ff£«*fe] BJMB* 
[*E*J*JHB£] 0 113 

[MEF*lS] 

[oi 1 3] jl— rsauji. Ht^c ( = 

M e (mod N) ) St mcO&WMT j ( e A ) lZ 
miWf& ( ST2 1 ) . 4HMHT j li, <J:«(22)S 
-(24) ^cdS D , **i-m&B«o»4Ht*s j 

^HUtjSff-TS (ST22) . 



jjZ to +- + /3 0 , z ■•■(10) 

&„ 

••• /3o,z -(11) 

ii^^MStS-3^t. ^(12) sSfc^J: 
£-«#8dj,k SlStl, ( ST 5 ) . fit. k e 

[¥^aiE5] 

[*§IE*f£JBB£] 0 07 5 

[0075] 
■••(15) 

A) frb&mLfctMWtMNUJjXx ( z eA) £ (1 
6 ) 5t<7) J; 3 (C-^-fig L . ¥3tM SrflTCf & £ t £ 
( ST1 6 ) . 

[MiESmiia*] 0 109 

[0 109] ZcotZ. t-lM&ftM. {bl, -bt-i> 
e Z tc*f L . (21) ^cotm^- . ^miKifetbh . 

-(21) 
[#*BtiE9] 

[«jE*f&JHB£] 0 13 1 
[«IE^}£] ^jg 

[0131] L*»L*J&*6, ^ffl: [FGMY97] 
S^{4. Ntf);fr>f (N) 
ST-fcD. d = P + L2k (mod (N) ) fcjftfc 

£\ i^aitO«M^^I£«d^0fIT"#^^ o J1& 
«, L^k^tHlfXETt. S£<£ (N) £*££LTUS« 

U i£<i& (N) t-dt^-pI^P + LSk^mtfJ-rSih 



(19) 32001-34164 (P2 0 0 1 -34 1 64A) 



¥ 9— 5B017 AA06 AA08 BA05 BA07 BA10 

BB02 BB07 CA01 CA06 CA07 
CA08 CA09 CA11 CA16 
5J104 AA01 AA09 AA16 EA02 EA04 
EA32 JA27 LA03 LA06 NA02 



